Protecting users against password guessing attacks

Protecting against password guessing attacks

Kerio Control can block IP addresses suspicious of password guessing attacks.

If an attacker tries to log in unsuccessfully 10 times (through various services), Kerio Control blocks the IP addressAn identifier assigned to devices connected to a TCP/IP network..

  1. Go to section Domains and User Login > tab Security Options.
  2. Select the Block IP addresses suspicious of password guessing attacks option.
  3. You can select a group of trustworthy IP addresses. For more information refer to Configuring IP address groups.
  4. Click Apply.

When Kerio Control blocks an account, user cannot log in. Kerio Control unlocks the blocked IP addresses after 5 minutes.